Security Advisory

CVE-2025-3757

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-13 16:33:18

Last updated 2025-05-13 20:12:58

Assigner cloudflare

CVSS score 9.3

State PUBLISHED

Versions of OpenPubkey library prior to 0.10.0 contained a vulnerability that would allow a specially crafted JWS to bypass signature verification.